More Than $18 Million Awarded For Tribal Cyber Security

By Isaac White

The Department of Homeland Security (DHS), through the Federal Emergency Management Agency (FEMA) and the Cybersecurity and Infrastructure Security Agency (CISA), has announced more than $18.2 million in Tribal Cybersecurity Grant Program (TCGP) awards to assist Tribal Nations in managing and reducing systemic cyber risks and threats. These grants represent the largest number of awards ever provided by the Department to Tribal Nations in a single grant program and mark the first-ever Tribal Cybersecurity Grants to be awarded.

"For far too long, Tribal Nations have faced digital and cybersecurity threats without the resources necessary to build resilience," said Secretary of Homeland Security Alejandro N. Mayorkas. "The Department of Homeland Security's first-ever Tribal Cybersecurity Grant Program awards announced today – made possible by President Biden's Bipartisan Infrastructure Law – will help tribes and tribal communities ensure they have the tools to assess risks, implement solutions, and increase cyber defenses."

Digital threats impacting American Indian and Alaska Native tribes are increasing and becoming more complex. Tribal sovereignty creates unique cybersecurity challenges for these communities, which have been consistently underfunded and under-resourced. The Tribal Cybersecurity Grant Program, established by the Bipartisan Infrastructure Law, is an example of a unified approach across DHS. This FEMA-administered program leverages CISA's capabilities to support grant recipients, address immediate needs, and reinforce the infrastructure that supports the sovereignty and resilience of Tribal Nations.

"With these first-ever Tribal Cybersecurity Grants, we are not just addressing immediate needs, but also reinforcing the infrastructure that supports the sovereignty and resilience of Tribal Nations," said FEMA Administrator Deanne Criswell. "This funding, benefitting the largest number of tribal recipients to build cybersecurity resilience in FEMA's history, is a testament to our dedication to a safer, more secure future for all communities."

The TCGP will fund efforts to establish critical governance frameworks for Tribal Nations to address cyber threats and vulnerabilities, identify key vulnerabilities and evaluate needed capabilities, implement measures to mitigate the threats and develop a 21st-century cyber workforce across local communities. These initiatives aim to significantly improve resilience to cyber threats by giving Tribal Nations the much-needed resources to address network security and take steps to protect against cybersecurity risks, ultimately strengthening their communities.

"These grants will help Tribal Nations combat the growing cyber threats they face every day and build resilience for their critical infrastructure," said CISA Director Jen Easterly. "We're proud to work with our federal partners to help Tribal Nations strengthen their cybersecurity."

All Tribal Cybersecurity Grant Program recipients are required to participate in a limited number of free services provided by CISA. These services include Cyber Hygiene Vulnerability Scanning, which evaluates external network presence by continuously scanning public, static internet protocol (IPs) for accessible services and vulnerabilities, and the Nationwide Cybersecurity Review, a free, anonymous, annual self-assessment designed to measure gaps and capabilities of a recipient's cybersecurity programs.

The Tribal Cybersecurity Grant Program aims to address cybersecurity risks and enable DHS to provide targeted cybersecurity resources that will improve the security of critical infrastructure and the resilience of services provided by Tribal governments to their members.

The program is jointly managed by CISA and FEMA. CISA provides cybersecurity programmatic subject-matter expertise by defining goals and objectives, reviewing and approving cybersecurity plans, establishing measures of effectiveness, and organizing Objective Review Panels to review and score applications.

FEMA provides administrative guidance through conducting eligibility reviews and issuing and administering the grant awards consistent with all applicable laws, regulations, and policies.

The need for such a program is underscored by the increasing and complex digital threats impacting American Indian and Alaska Native tribes. Tribal sovereignty creates unique cybersecurity challenges for these communities, which have long been underfunded and under-resourced.

This program exemplifies a unified approach across DHS. It is a FEMA-administered program that leverages CISA's capabilities to accomplish the Department's goal of increasing tribal cyber defenses, similar to the State and Local Cybersecurity Grant Program announced in 2023.

DHS says it respects tribal governments' sovereignty and self-determination and recognizes Congress' intent to provide flexibility to Tribal governments to meet cybersecurity needs across Indian Country through the TCGP. The program's framework was developed through nation-to-nation consultations with tribal representatives across the country and is intended to support tribal cybersecurity resiliency.

CISA has developed four overarching objectives for the TCGP based on national priorities, frameworks, and the national cyber threat environment:

Establish cyber governance and planning;

Assess and evaluate systems and capabilities;

Implement security protections commensurate with risk; and

Build and train a cybersecurity workforce.

Tribal governments were required to address how they would meet Program Objective 1 in their FY 2023 applications. While Objectives 2, 3, and 4 were eligible, they were not required to be addressed in the FY 2023 applications.

All 574 federally recognized Tribal governments were eligible to apply for the TCGP. Applicants were required to submit a Cybersecurity Plan, Cybersecurity Planning Committee List, and Charter.

The announcement of more than $18.2 million in grants to 32 Tribal governments marks a significant milestone in the efforts to enhance tribal nations' cybersecurity resilience. This funding will support the development of governance frameworks, identification of key vulnerabilities, implementation of measures to mitigate cyber threats, and training of a cybersecurity workforce, ultimately leading to a safer and more secure future for all communities.

As digital threats continue to evolve and impact American Indian and Alaska Native tribes, programs like the Tribal Cybersecurity Grant Program will play a major role in providing the necessary resources to build resilience and strengthen cyber defenses.

The Awardees are as follows:

See Photos